ZDI-CAN-24985: ZDI-25-316: Hewlett Packard Enterprise StoreOnce VSA Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Hewlett Packard Enterprise StoreOnce VSA. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2025-37093.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-24985?
The severity of ZDI-CAN-24985 is rated at 9.8 on the CVSS scale, indicating critical risk.
How do I fix ZDI-CAN-24985?
To fix ZDI-CAN-24985, apply the latest security patches and updates provided by Hewlett Packard Enterprise for StoreOnce VSA.
What type of attack can exploit ZDI-CAN-24985?
ZDI-CAN-24985 can be exploited by remote attackers to bypass authentication without needing any credentials.
Which software versions are affected by ZDI-CAN-24985?
ZDI-CAN-24985 affects installations of Hewlett Packard Enterprise StoreOnce VSA, although specific version details are not disclosed.
Is authentication required to exploit ZDI-CAN-24985?
No, authentication is not required to exploit ZDI-CAN-24985.